NETGEAR XR1000v2 vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20266

Newest CVEs

• CVE-2026-9215

  A CSRF vulnerability exists in certain NETGEAR XR series devices

  NETGEAR · XR1000v2

  Low1.8
• CVE-2026-11736

  Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

  NETGEAR · RAX20

  Low1.9
• CVE-2026-11735

  Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

  NETGEAR · R7000

  Low1.9
• CVE-2026-11739

  Command injection vulnerability in some NETGEAR Nighthawk devices

  NETGEAR · MR60

  Medium4.9
• CVE-2026-0410

  Insufficient input validation in certain NETGEAR routers

  NETGEAR · R7000

  Low1.9
• CVE-2026-0406

  Insufficient input validation in NETGEAR Nighthawk router XR1000v2

  NETGEAR · XR1000v2

  Medium6.1
• CVE-2025-25246

  NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

  NETGEAR · XR1000

  High8.1